[病毒样本] 包

显示全部楼层 · 发表于 2007-11-9 11:41:08

小红伞:
34 Files were scanned
31 viruses and/or unwanted programs were found
毒霸:25
瑞星:14

显示全部楼层 · 发表于 2007-11-9 11:45:17

检测到病毒: Trojan-PSW.Win32.OnLineGames.hdg, Trojan-PSW.Win32.OnLineGames.gyu (2x), Trojan-PSW.Win32.OnLineGames.hee, Trojan-PSW.Win32.Lmir.bos (3x), Trojan-PSW.Win32.OnLineGames.hdv, Trojan-PSW.Win32.OnLineGames.hed, Trojan-PSW.Win32.OnLineGames.fhz (2x), Trojan-PSW.Win32.OnLineGames.fxk, Trojan-PSW.Win32.OnLineGames.gis, Trojan-PSW.Win32.WOW.aeh, Trojan-PSW.Win32.OnLineGames.hdw (2x), Trojan-PSW.Win32.OnLineGames.hdu, Trojan-PSW.Win32.OnLineGames.gwp, Trojan-PSW.Win32.OnLineGames.hde, Worm.Win32.Downloader.ah (2x), Trojan-PSW.Win32.OnLineGames.hec, Trojan-PSW.Win32.OnLineGames.gvc, Trojan-PSW.Win32.WOW.aei
文件: xxxx[1].rar

显示全部楼层 · 发表于 2007-11-9 12:07:42

卡8狂报！

显示全部楼层 · 发表于 2007-11-9 12:20:50

Result: 22 malware found
Trojan-PSW.Win32.OnLineGames.hdg (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conime5.exe
Trojan-PSW.Win32.OnLineGames.gyu (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conimec.exe
C:\Users\Administrator\Desktop\xxxx.rar\sqmapi32.dll
Trojan-PSW.Win32.OnLineGames.hee (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conime4.exe
Trojan-PSW.Win32.Lmir.bos (virus)
C:\Users\Administrator\Desktop\xxxx.rar\IGM.exe
C:\Users\Administrator\Desktop\xxxx.rar\75976MM.DLL
C:\Users\Administrator\Desktop\xxxx.rar\intest.exe
Trojan-PSW.Win32.OnLineGames.hdv (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conimel.exe
Trojan-PSW.Win32.OnLineGames.hed (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conime2.exe
Trojan-PSW.Win32.OnLineGames.fhz (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conime8.exe
C:\Users\Administrator\Desktop\xxxx.rar\wistves.exe
Trojan-PSW.Win32.OnLineGames.fxk (virus)
C:\Users\Administrator\Desktop\xxxx.rar\nk.exe
Trojan-PSW.Win32.OnLineGames.gis (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conime7.exe
Trojan-PSW.Win32.WOW.aeh (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conimeh.exe
Trojan-PSW.Win32.OnLineGames.hdw (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conime9.exe
C:\Users\Administrator\Desktop\xxxx.rar\conimeb.exe
Trojan-PSW.Win32.OnLineGames.hdu (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conimek.exe
Trojan-PSW.Win32.OnLineGames.gwp (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conimee.exe
Trojan-PSW.Win32.OnLineGames.hde (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conimed.exe
Trojan-PSW.Win32.OnLineGames.hec (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conime0.exe
Trojan-PSW.Win32.OnLineGames.gvc (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conime1.exe
Trojan-PSW.Win32.WOW.aei (virus)
C:\Users\Administrator\Desktop\xxxx.rar\conimei.exe

显示全部楼层 · 发表于 2007-11-9 12:42:14

扫描开始时间: 2007-11-9 12:37:11
扫描日志
NOD32 版本 2647 (20071109) NT
命令行: H:\Download\毒样\xxxx.rar
D:\Program Files\Eset\nod32.exe<病毒 - 正常>
物理磁盘 1 的 MBR 扇区，<病毒 - 正常>
物理磁盘 1 的活动引导扇区，<病毒 - 正常>

日期: 2007年11月9日时间: 12:37:13
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: H:\Download\毒样\xxxx.rar
H:\Download\毒样\xxxx.rar ?RAR ?conime3.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NGU 木马变种>
H:\Download\毒样\xxxx.rar ?RAR ?conimem.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NGU 木马变种>
H:\Download\毒样\xxxx.rar ?RAR ?conime5.exe<病毒 - Win32/PSW.OnLineGames.NGU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?conimec.exe<病毒 - Win32/PSW.OnLineGames.NGU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?conime4.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NGU 木马变种>
H:\Download\毒样\xxxx.rar ?RAR ?LYLOADER.EXE<病毒 - Win32/PSW.Agent.NEC 木马变种>
H:\Download\毒样\xxxx.rar ?RAR ?IGM.exe<病毒 - 可能是 Win32/PSW.WOW.WU 木马变种>
H:\Download\毒样\xxxx.rar ?RAR ?conimel.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NGU 木马变种>
H:\Download\毒样\xxxx.rar ?RAR ?conime2.exe<病毒 - Win32/PSW.OnLineGames.NGU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?conime8.exe<病毒 - Win32/PSW.WOW.WU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?nk.exe<病毒 - Win32/PSW.WOW.WU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?conime7.exe<病毒 - Win32/PSW.WOW.WU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?conimeh.exe<病毒 - Win32/PSW.OnLineGames.NGU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?sqmapi32.dll<病毒 - Win32/PSW.OnLineGames.NHF 木马>
H:\Download\毒样\xxxx.rar ?RAR ?conime9.exe<病毒 - Win32/PSW.OnLineGames.NGU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?conimek.exe<病毒 - Win32/PSW.OnLineGames.NGU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?MSDEG32.DLL<病毒 - Win32/PSW.OnLineGames.DVV 木马变种>
H:\Download\毒样\xxxx.rar ?RAR ?conime6.exe<病毒 - Win32/PSW.WOW.WU 木马变种>
H:\Download\毒样\xxxx.rar ?RAR ?conimee.exe<病毒 - Win32/PSW.OnLineGames.NGU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?conimed.exe<病毒 - Win32/PSW.OnLineGames.NGU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?ntuser.com<病毒 - Win32/Jalous 蠕虫变种>
H:\Download\毒样\xxxx.rar ?RAR ?conime0.exe<病毒 - 正常>
H:\Download\毒样\xxxx.rar ?RAR ?Deleteme.bat<病毒 - 正常>
H:\Download\毒样\xxxx.rar ?RAR ?conimef.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NGU 木马变种>
H:\Download\毒样\xxxx.rar ?RAR ?conime1.exe<病毒 - Win32/PSW.Agent.NEC 木马>
H:\Download\毒样\xxxx.rar ?RAR ?conimeb.exe<病毒 - Win32/PSW.OnLineGames.NGU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?75976MM.DLL<病毒 - Win32/PSW.Legendmir.NFF 木马>
H:\Download\毒样\xxxx.rar ?RAR ?conimej.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NGU 木马变种>
H:\Download\毒样\xxxx.rar ?RAR ?conimei.exe<病毒 - Win32/PSW.OnLineGames.NGU 木马>
H:\Download\毒样\xxxx.rar ?RAR ?pcibus.sys<病毒 - Win32/Jalous 蠕虫变种>
H:\Download\毒样\xxxx.rar ?RAR ?wistves.exe<病毒 - Win32/PSW.Legendmir.NFI 木马>
H:\Download\毒样\xxxx.rar ?RAR ?intest.exe<病毒 - 可能是 Win32/PSW.WOW.WU 木马变种>
H:\Download\毒样\xxxx.rar:Zone.Identifier<病毒 - 正常>
已扫描文件数量: 33
已发现病毒数量: 30
完成时间: 12:37:16 总共扫描时间: 3 秒 (00:00:03)

显示全部楼层 · 发表于 2007-11-9 13:06:18

avast还是很强的，下载的时候还没有下完就报了，喜欢

显示全部楼层 · 发表于 2007-11-9 13:28:52

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\xxxx.rar'
C:\Documents and Settings\Administrator\桌面\xxxx.rar
  [0] Archive type: RAR
  --> conime3.exe
   [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> conimem.exe
   [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> conime5.exe
   [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> conimec.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.gyu
  --> conime4.exe
   [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> LYLOADER.EXE
   [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> IGM.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> conimel.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.gja.1
  --> conime2.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hef
  --> conime8.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> nk.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.gis
  --> conime7.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.gis
  --> conimeh.exe
   [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> sqmapi32.dll
   [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> conime9.exe
   [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> conimek.exe
   [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> MSDEG32.DLL
   [DETECTION] Is the Trojan horse TR/PSW.Online.gyo.2
  --> conime6.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> conimee.exe
   [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> conimed.exe
   [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> ntuser.com
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
  --> conime0.exe
   [DETECTION] Is the Trojan horse TR/Delf.IUA.2
  --> conimef.exe
   [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> conime1.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> conimeb.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hdx
  --> 75976MM.DLL
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> conimej.exe
   [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> conimei.exe
   [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> pcibus.sys
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
  --> wistves.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> intest.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was deleted!

End of the scan: 星期五 2007年11月9日  13:28
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   34 Files were scanned
   31 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-11-9 13:59:12

kav6 got them all!!

显示全部楼层 · 发表于 2007-11-9 14:10:32

NOD32扫描32个，发现30个。而微点报16个已知。

[病毒样本] 包

本帖子中包含更多资源